CVE-2015-7900

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 Patch Third Party Advisory US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:*:*:*:*:*:*:*
cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 02:37

Type Values Removed Values Added
References () https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 - Patch, Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 - Patch, Third Party Advisory, US Government Resource

Information

Published : 2015-10-28 10:59

Updated : 2024-11-21 02:37


NVD link : CVE-2015-7900

Mitre link : CVE-2015-7900

CVE.ORG link : CVE-2015-7900


JSON object : View

Products Affected

infinite_automation_systems

  • mango_automation
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor